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Description 
TECHNICAL FIELD 

[0001] The present invention relates to a computer 5 
for recording and reproducing data, and also relates to 
a program recording medium. 

BACKGROUND ART 

w 

[0002] Networks for transmitting audio and video 
information in digital form are being developed. To 
transmit audio or video information for viewing or listen- 
ing, the data must be transmitted in real time. 
[0003] IEEE 1394 was proposed as a standard for is 
networks realizing such realtime data transmission, and 
is widely used today. IEEE 1394 is mounted as an exter- 
nal interface in many digital video/audio apparatuses 
including home digital VCRs. In VCRs, the use of IEEE 
1394 has made it possible to control the VCR from an 20 
external device and also to transmit data from an exter- 
nal device to the VCR for recording or reproduction. 
[0004] In PCs, on the other hand, with advances in 
multimedia technology and the advent of recording 
media such as large-capacity hard disks and magneto- 25 
optica! disks, it has become possible to process video 
and audio information as well. That is, PCs can now 
have the capability to function as a recording and repro- 
duction apparatus or a monitor for video and audio infor- 
mation. Windows 98, the standard OS for PCs, for 30 
example, supports IEEE 1394, making it possible to 
transfer AV data between PCs and digital video/audio 
apparatuses such as VCRS. It is expected that the 
fusion between PCs and digital video/audio appara- 
tuses will further advance in the future. 35 
[0005] For a PC to be able to handle video and 
audio information, application software for processing 
video and audio information must be installed on the 
PC. AV data transferred from a video/audio apparatus is 
input into the PC, and processed for display, recording, 40 
reproduction, etc. by the application software installed 
on the PC. For example, if the application software is 
one that has a recording function, the AV data trans- 
ferred from the video/audio apparatus is input into the 
PC, and recorded on a recording medium such as a 45 
hard disk or a magneto-optical disk by the application 
software. Application software capable of processing 
AV data thus provides a variety of capabilities and, by 
installing such application software, a variety of AV data 
processing functions such as recording, reproduction, so 
display, and manipulation can be added to the PC. 
[0006] Some AV data claim copyright protection, for 
example, by prohibiting copying or by permitting copying 
only once. In digital video/audio apparatuses such as 
VCRs, such copyright claimed AV data is recorded or ss 
played back by respecting the claimed copyright protec- 
tion status. For example, for AV data for which copying 
is prohibited, VCRs do not record the data. On the other 



hand, for AV data for which copying is permitted only 
once, VCRs are allowed to record the data. Whether 
copying of AV data is permitted or not is confirmed by 
exchanging authentication or usage approval informa- 
tion based on copyright between the VCR and the AV 
data transmitting apparatus such as an STB (satellite 
broadcast receiver). 

[0007] In today's PCs, however, if one wishes to 
respect the claimed copyright of copyright claimed AV 
data, since a variety of functions, such as recording, 
reproduction, and display, can be incorporated into a PC 
by utilizing the functions of the application software 
installed on the PC, there arises the problem that once 
the copyright claimed AV data is passed to the applica- 
tion software, one can freely process the AV data for 
recording, etc. by using the application software, defeat- 
ing the purpose of the copyright protection. 
[0008] Even if a mechanism is devised to append a 
license for processing copyright claimed AV data to 
application software, the copyright may not be able to 
be protected if the application software is illegally modi- 
fied. In that case, if a tamper resistant system is built 
into the application software to prevent illegal modifica- 
tion of the application software, the copyright can be 
protected effectively. However, this method is not with- 
out problems; that is, once the tamper resistant system 
is broken by an illegal-minded user, substantial changes 
would have to be made not only to the organization of 
the PC but also to the structures of the OS, the applica- 
tion software, etc. resulting in a large loss. 
[0009] Furthermore, if copyright claimed data is ille- 
gally handled using application software to which a 
license as described above is not granted, it is not pos- 
sible to identify the source application software from the 
data that was illegally copied by the application software 
and distributed. That is, even if the presence of illegal 
application software is known, it is not possible to detect 
and disable the use of the illegal application software. 
That is, the problem is that it is not possible to identify 
and eliminate illegal software for copyright protection 
purposes. 

[0010] One characteristic of illegal usage by soft- 
ware is that the method of illegal usage can be distrib- 
uted widely at low cost by just copying the software. 
This leads to the problem that even if the source of the 
illegal distribution can be identified, it is not effective to 
employ a method applied in the case of hardware that 
disables the use by illegal apparatuses on an apparatus 
by apparatus basis. For example, when copies of an ille- 
gally altered application capable of escaping the check 
by a tamper resistant system are distributed, or when a 
method of escaping the check by a tamper resistant 
system is discovered and distributed, with the prior 
known method of disabling the use for each individual 
computer it is not possible to prevent such illegal act; 
besides, it could disable the use of legitimate applica- 
tions. 

[0011] In view of the above situation, it is apparent 
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that once an illegal distribution by a computer modified 
for the purpose of illegal distribution is discovered, since 
measures have to be taken to prohibit the use of AV 
data on computers or on the OS and to modify the com- 
puters or the OS itself, the damage is extensive and the 5 
cost involved is very high. 

[0012] As described above, the problem is that 
there are no effective ways to prevent illegal use once 
copyright claimed data is illegally distributed. 

10 

DISCLOSURE OF THE INVENTION 

[0013] In view of the problems that application soft- 
ware can perform processing that Infringes copyright on 
copyright claimed data, defeating the purpose of copy- is 
right protection, that It is' practiced to defeat copyright 
protection by illegally modifying application software, 
that if illegal application software is produced, it is not 
possible to identify and disable the illegal software to 
protect the copyright, that if copies of an illegally altered 20 
application capable of escaping the check by a tamper 
resistant system are distributed, with the prior known 
method it is not possible to prevent illegal use, and that 
when an illegal distribution by a computer modified for 
the purpose of illegal distribution is discovered, the cost 25 
of countermeasures is very high, it is an object of the 
present invention to provide a computer and a program 
recording medium that can protect the copyright for cop- 
yright claimed data and take countermeasures against 
illegal modifications of application software, and that, if 30 
illegal application is discovered, can identify and reject 
the application software and prevent an illegal distribu- 
tion without involving extra cost 

[0014] To solve the problems described above, the 
1 51 invention of the present invention (corresponding to 35 
claim 1) is 

a computer which comprises a system section and 
an application software section, and which takes in 
copyright claimed, encrypted data via a digital inter- 40 
face for processing therein, wherein 
said system section judges that said application 
software section is legitimate application software 
for the protection of copyright, and 
if said application software is a legitimate one, said 45 
system section passes a key for said encrypted 
data to said application software section. 

[0015] The 2 nd invention of the present invention 
(corresponding to claim 2) is a computer according to so 
said 1 st invention, wherein said judgement in said sys- 
tem section is made by performing authentication 
between said system section and said application soft- 
ware section. 

[0016] The 3 rd invention of the present invention 55 
(corresponding to claim 3) is a computer according to 
said 1 st invention, wherein said judgement in said sys- 
tem section is made by using a CRL (Certification Rev- 



ocation List) listing illegitimate or legitimate application 
software. 

[0017] The 4 th invention of the present invention 
(corresponding to claim 4) is a computer according to 
any one of said 1 81 to 3 rd inventions, wherein said sys- 
tem section obtains said encrypted key as the result of 
authentication with an external device, decrypts said 
encrypted data, and re-encrypts said decrypted data by 
using said key or another key. 

[0018] The 5 th invention of the present invention 
(corresponding to claim 5) is a computer according to 
any one of said 1 st to 4 th inventions, wherein said sys- 
tem section includes a tamper verification function, and 
a tamper code is embedded into said application soft- 
ware in said application software section, and wherein 
said system section reads said tamper code from said 
application software section and, using said tamper ver- 
ification function, verifies whether or not said application 
software has been tampered with, and if it Is found that 
said application software has been tampered with, said 
system section reports the result of said verification. 
[0019] The 6 th invention of the present invention 
(corresponding to claim 6) is a computer which com- 
prises a system section and an application software 
section, and which takes in copyright claimed, 
encrypted data via a digital interface for processing 
therein, wherein 

[0020] said system section includes a plurality of 
tamper verification functions, and a tamper code associ- 
ated with a designated type of tamper verification func- 
tion and type information indicating said type are 
embedded into said application software in said applica- 
tion software section, and wherein said system section 
reads said tamper code and its associated type informa- 
tion from said application software section and, using 
the tamper verification function corresponding to said 
type, verifies whether or not said application software 
has been tampered with, and if it is found that said appli- 
cation software has been tampered with, said system 
section reports the result of said verification. 
[0021] The 7 th invention of the present invention 
(corresponding to claim 7) is a computer which com- 
prises a system section and an application software 
section, and which takes in copyright claimed, 
encrypted data via a digital interface for processing 
therein, wherein 

said system section sends said data to said appli- 
cation section by embedding into said data informa- 
tion concerning application software residing in said 
application software section. 

[0022] The 8 th invention of the present invention 
(corresponding to claim 8) is a computer according to 
said 7 th invention, wherein the information concerning 
said application software is information indicating the 
name of said application software, or the version 
number of said application software, or a tamper code, 
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or the type : of a tamper resistance verification function, 
or information concerning user. 

[0023] The 9 th invention of the present invention 
(corresponding to claim 9) is a medium holding thereon 
a program and/or data for enabling a computer to imple- s 
ment ail or part of the functions of all or part of the 
means of the invention described in any one of said 1 st 
to 8 th inventions, wherein said medium is computer 
processable. 

[0024] The 10 th invention of the present invention 10 
(corresponding to claim 1 0) is a collection of information 
wherein said collection of information is a program 
and/or data for enabling a computer to implement all or 
part of the functions of all or part of the means of the 
invention described In any one of said 1 st to 8 th inven- is 
tions. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0025] 20 

Figure 1 is a block diagram showing a first embodi- 
ment of the present invention in which authentica- 
tion is performed between a system section and an 
application software section and AV data is 25 
encrypted within a PC. 

Figure 2 is a diagram showing a second embodi- 
ment of the present invention in which illegal appli- 
cation software is detected using CRL. 
Figure 3 is a diagram showing a third embodiment 30 
of the present invention in which a tamper resistant 
system is incorporated. 

Figure 4 is a diagram showing a fourth embodiment 
of the present invention in which a plurality of 
tamper verification functions are incorporated. 35 
Figure 5 is a diagram showing a fifth embodiment of 
the present invention in which an electronic water- 
mark is embedded into copyright claimed AV data. 
Figure 6 is a diagram showing a sixth embodiment 
of the present invention in which the copyright of 4o 
copyright claimed AV data can be protected more 
securely. 

Figure 7 is a list showing the authentication suc- 
cess/fail status versus the type of license appended 
to application software according to the first embod- 45 
iment of 

the present invention. 

[DESCRIPTION OF THE REFERENCE NUMERALS] so 
[0026] 

1.1394 D-IF 

2. TRANSMISSION AUTHENTICATION MEANS 55 

3. APPLICATION AUTHENTICATION FUNCTION 

4. SIGNATURE MEMORY 

5. DATA PATH 
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6. TRANSMISSION DECRYPTION MEANS 

7. INTRA-PC ENCRYPTION MEANS 

8. APPLICATION AUTHENTICATION MEANS 

9. SIGNATURE CREATING MEANS 

10. DATA USE (DECODE DISPLAY) MEANS 

11. DECRYPTION MEANS 

12. SYSTEM SECTION 

13. APPLICATION SOFTWARE SECTION 

14. CRL MEMORY 

15. APPLICATION CRL MEMORY 

16. CRL COMPARING MEANS 

17. TAMPER AUTHENTICATION FUNCTION 

18. 19. SOFT CHECK MEANS 

20. VERSION SELECTING MEANS 

21. TAMPER AUTHENTICATION FUNCTION 

22. SIGNATURE EMBEDDING MEANS 

23. ELECTRONIC WATERMARK EMBEDDING 
MEANS 

BEST MODE FOR CARRYING OUT THE INVENTION 

[0027] Embodiments of the present invention will be 
described below with reference to drawings. 

(Embodiment 1 ) 

[0028] A first embodiment will be described with ref- 
erence to Figures 1 and 7. This embodiment deals with 
the case in which authentication is performed between 
a system section and an application software section 
and AV data input to a PC is transferred through the PC 
in encrypted form. In Figure 1 , the PC 24 comprises the 
system section 12 and the application software section 
13. The system section 12 is D-IF hardware of the PC 
24 or system software such as a driver or OS. The appli- 
cation software section 13 is a means for recording 
application software and executing the application soft- 
ware. 

[0029] The system section 1 2 comprises a 1 394 D- 
IF 1, a transmission authentication means 2, an applica- 
tion authentication function 3, a signature memory 4, a 
transmission decryption means 6, and an intra- PC 
encryption means 7. 

[0030] The 1394 D-IF 1 is an IEEE 1394 interface, a 
serial bus interface standard, for transferring data and 
commands to and from an external device such as an 
STB or D-VHS. The transmission authentication means 
2 is a means which, when AV data claims copyright pro- 
tection, performs authentication with an external device 
and, when the authentication is completed successfully, 
passes a key for decrypting the AV data to the transmis- 
sion decryption means 6. The application authentication 
function is a means for performing authentication within 
the PC when the AV data input via the 1394 D-IF 1 
claims copyright protection. More specifically, it per- 
forms authentication with the application software sec- 
tion 13 by referencing the contents of the signature 
memory 4 where the signature created by a signature 
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creating means 9 is recorded and, when the authentica- 
» tion is completed successfully, passes an encryption 
key to the intra- PC encryption means 7 and a decryp- 
tion key to an application authentication means 8. The 
signature memory 4 is a memory for recording the sig- 5 
nature created by the signature creating means 9. The 
transmission decryption means 6 is a means which, 
when the authentication with the external device is com- 
pleted successfully, receives the key from the transmis- 
sion authentication means 2 and decrypts the AV data 70 
input via the 1394 D-IF 1. The intra-PC encryption 
means 7 is a means which, when the authentication 
with the application software section 13 is completed 
successfully, re-encrypts the AV data decrypted by the 
transmission decryption means 6 and passes the 75 
encrypted data to the application software section 13. 
[0031] The application software section 13 com- 
prises the application authentication means 8, the sig- 
nature creating means 9, a data using (decoding and 
displaying) means 10, and a decryption means 11. 20 
[0032] The application authentication means 8 is a 
means for performing authentication with the applica- 
tion authentication function in the system section 12. 
The signature creating means 9 is a means for creating 
a digital signature which is used when performing 25 
authentication with the system section 12. The data 
using (decoding and displaying) means 10 is a means 
for enabling currently running application software to 
use the AV data. The decryption means 1 1 is a means 
which, when the authentication with the system section 30 
12 is completed successfully, receives a decryption key 
from the application authentication means 9 and 
decrypts, using the key, the AV data encrypted by the 
intra-PC encryption means 7. 

[0033] Next, the operation of the present embodi- 35 
ment having the above configuration will be described. 
[0034] First, a method of describing copyright infor- 
mation will be described. 

[0035] When AV data is transferred from an exter- 
nal device such as an STB or VTR to the PC 24, that AV 40 
data may be one claiming copyright protection. That is, 
it may carry an appendage indicating that copying is 
prohibited or copying is permitted only once. Such sign- 
aling information indicating approval for use is imple- 
mented using the CGMS (Copy Generation information) 45 
embedded in a stream. 

[0036] The CGMS is contained in a transport 
stream transmitted from a broadcasting station. The 
CGMS is 2-bit data; the values that the CGMS can take 
and their meanings are as follows. so 
[0037] That is, CGMS = 11 means "copy never", 
CGMS = 10 means 'copy one generation", and CGMS 
= 00 means "copy free". CGMS = 01 does not exist. 
Here, "copy never" means that copying is prohibited and 
only playing back the AV data is permitted. "Copy one 55 
generation" means that copying is permitted only once 
and the copied AV data can be played back as many 
times as desired. "Copy free" means that the data can 



be copied freely. Detection of the CGMS requires the 
provision of a transport stream decoder circuit or the like 
and makes the hardware configuration complex. 
[0038] The need for hardware such as the transport 
stream decoder circuit can be eliminated if signaling 
information (hereinafter referred to as EMI for Encryp- 
tion Mode Indicator) for transmitting usage approval 
information is included in the IEEE 1394 packet data 
header. 

[0039] The EMI is generated from the CGMS, and 
takes the following values. That is, EMI = 1 1 means 
"copy never", EMI = 10 means "copy one generation", 
and EMI = 00 means "copy free". EMI = 01 means "no 
more copy". Here, "copy never" means that copying is 
prohibited and only playing back the AV data is permit- 
ted. "Copy one generation" means that copying is per- 
mitted only once and the copied AV data can be played 
back as many times as desired. "Copy free" means that 
the data can be copied freely. "No more copy" means 
that the data is AV data already copied in compliance 
with "copy one generation", and therefore that no more 
copies are permitted. 

[0040] In IEEE 1394. such EMI is used to specify 
the method of encryption and the method of authentica- 
tion. For example, no encryption is performed when 
transmitting AV data with EMI = 00 meaning "copy free". 
For data with EMI = 10 meaning "copy one generation" 
or EMI = 01 meaning "no more copy", the key used for 
encryption and the method of device authentication are 
different from those used for data with EMI = 1 1 mean- 
ing "copy never". 

[0041] Suppose here that AV data is received from 
an STB. Then, it is determined, based on the CGMS or 
the EMI, whether the AV data received from the STB is 
data claiming copyright protection; if it is copyright 
claimed data, authentication is performed with the STB, 
the sender of the AV data. The AV data is transmitted in 
encrypted form and, when the authentication is com- 
pleted successfully, the transmission authentication 
means 2 receives a key for decrypting the AV data from 
the STB. When EMI is 11, authentication is performed 
based on a public key, while when EMI is 10 or 01, 
authentication is performed based on a common key. 
[0042] When the authentication between the trans- 
mission authentication means and the STB is com- 
pleted successfully, authentication between the 
application software section 1 3 and the system section 
12 is performed next. In the application authentication 
means 8, the signature creating means 9 creates a dig- 
ital signature for the currently running application soft- 
ware. The signature memory 4 records the digital 
signature created by the signature creating means 8. 
The application authentication function 3 performs the 
authentication with the application authentication 
means 8 by using the digital signature recorded in the 
signature memory 4. 

[0043] Here, a license corresponding to the usage 
approval information of the copyright claimed AV data is 
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appended in advance to each application software. The 
authentication between the application software section 
13 and the system section 12 is completed successfully 
only when the software has a legitimate license. More 
specifically, the license is classified according to the 
function of application software. That is, the license 
given to software that has the function of only displaying 
AV data is classified as license A, and the license given 
to software that has the function of recording AV data is 
classified as license B. Further, the license given to soft- 
ware that strictly observes the copy protection status is 
classified as license C. The license C is given to such 
software that, when AV data is copy prohibited data, 
only plays back the AV data and does not copy it, and 
that, when AV data is data permitting copying only once, 
copies the AV data only once. However, the license C 
requires that the contents of the copyright of copyright 
claimed AV data be reported to the application software 
together with the AV data; this can be accomplished by 
building EMI or CGMS into the AV data. 
[0044] Suppose here that the license class of the 
currently running application software is B. Also sup- 
pose that the usage approval information for the AV 
data transmitted from the STB indicates EMI = 11. That 
is, copying of the AV data is prohibited. In this case, 
authentication between the application authentication 
means 8 and the application authentication function 3 is 
performed, but the authentication fails. Next, suppose 
that the license class of the currently running applica- 
tion software is A. In this case, since the application 
software is one that performs only display, authentica- 
tion between the application authentication means 8 
and the application authentication function 3 will be 
completed successfully. 

[0045] Further, when copying of the AV data is pro- 
hibited, if the application software is one with the license 
C, the authentication will be completed successfully. 
Figure 7 shows a list tabulating the relationships among 
the usage approval status of AV data, licence class of 
application software, and success/fail status of authen- 
tication. 

[0046] When the authentication between the appli- 
cation software section 13 and the system section 12 is 
completed successfully, the transmission decryption 
means 6 receives the decryption key from the transmis- 
sion authentication means 2 and decrypts the AV data 
received via the 1394 D-IF 1 . Next, the intra-PC encryp- 
tion means 7 re-encrypts the AV data. Within the PC 24, 
the copyright claimed AV data is transferred in 
encrypted form until it is presented for use by the appli- 
cation software. The decryption means 11 in the data 
using (decoding and displaying) means 10 receives the 
decryption key from the application authentication 
means 8 and decrypts the AV data. The decrypted AV 
data is passed from the data using (decoding and dis- 
playing) means 10 to the currently running application 
software for processing. 

[0047] On the other hand, when the authentication 



between the application software section 13 and the 
system section 12 failed, the AV data is once decrypted 
by the transmission decryption means 6 and then 
encrypted again by the intra-PC encryption means 7, 

$ and the encrypted data is transferred to the data using 
(decoding and displaying) means 1 0. Since the authen- 
tication failed, the application authentication means 8 
cannot receive the decryption key from the application 
authentication function 3; as a result, the decryption key 

10 cannot be passed to the decryption means 1 1 which is 
therefore unable to decrypt the AV data. In this way, if 
the application software does not have an appropriate 
license, it cannot decrypt the AV data for processing, 
since the authentication fails. 

15 [0048] In this way, copyright claimed AV data is 
encrypted within the PC 24, and authentication is per- 
formed between the system section 12 and the applica- 
tion software section 13, to selectively identify 
application software that has the appropriate license; 

20 accordingly, if application software that does not have 
the appropriate license receives the AV data, since the 
data is encrypted, the application software cannot han- 
dle the AV data as valid data, and the copyright claimed 
AV data can thus be protected. 

25 [0049] The re-encryptlon according to the present 
invention may be performed using the same key as that 
used to encrypt the data for transmission or a different 
key from that used to encrypt the data for transmission. 
Further, the AV data received in encrypted form may be 

30 transferred within the PC in the encrypted form without 
once decrypting it. It will also be noted that the method 
of re-encryption is not limited to the particular method 
described above, but any other specific method may be 
used. 

35 [0050] Furthermore, in the present embodiment, 
the intra-PC encryption means has been described as 
transmitting the encrypted data to the data using 
(decoding and displaying) means when the authentica- 
tion between the system section and the application 

40 software section failed, but instead, invalid data such as 
a blueback screen may be transmitted to the data using 
(decoding and displaying) means when the authentica- 
tion failed. By so doing, the copyright of the AV data can 
be protected more securely. 

45 [0051 ] The system section according to the present 
invention can be implemented using hardware constitut- 
ing the 1 394 D-IF or system software such as a driver or 
OS. That is, it may be implemented using hardware 
within the PC or using system software. 

so [0052] Moreover, the license according to the 
present embodiment is not limited to the one classified 
into three classes A, B, and C, as described above. It 
may be classified into four classes or two classes, the 
only requirement being that it be classified according to 

55 the status of the copyright information of AV data. 

[0053] The present embodiment has been 
described by taking an STB as an example of the exter- 
nal device from which the PC receives copyright 



6 



11 



EP 1 083 480 A1 



12 



claime/1 AV data, but the invention is not limited to this 
particular example; that is, any other device, such as a 
DVC. DVHS, HDD, DVD-RAM, or broadcasting receiver 
may be used as the external device as long as it can 
transmit copyright claimed AV data. 
[0054] Further, the present embodiment has been 
described by taking IEEE 1394 as an example, but the 
invention is not limited to this particular example, and 
any other network may be used as long as it has the 
function of transmitting copyright claimed AV data 
together with its copyright information. 
[0055] It wiii also be noted that the AV data accord- 
ing to the present embodiment is not limited to 
video/audio data as described above, but should be 
interpreted to also include data such as copyright 
claimed programs or documents or any other data 
claiming copyright. 

[0056] The PC described in the present embodi- 
ment is an example of the computer of the present 
invention. 

(Embodiment 2) 

[0057] Next, a second embodiment will be 
described with reference to Figure 2. 
[0058] The description of this embodiment deals 
with the case in which before performing authentication 
between the system section and the application soft- 
ware section, application software is discriminated 
using a management criterion (hereinafter called the 
CRL) discriminating illegitimate or legitimate application 
software. 

[0059] The difference from the first embodiment is 
that the system section 12 includes a CRL memory 14, 
an application CRL memory 15, and a CRL comparing 
means 16. The following description is given focusing 
on the difference from the first embodiment. 
[0060] The CRL memory 1 4 is a memory for storing 
the management criterion for discriminating an illegiti- 
mate or legitimate device. The application CRL memory 
15 is a means for storing the management criterion for 
discriminating illegitimate or legitimate application soft- 
ware. The CRL comparing means 16 is a means for 
judging based on the CRL whether application software 
is illegitimate or legitimate. 

[0061] Next, the operation of the present embodi- 
ment having the above configuration will be described. 
[0062] In this embodiment also, it is assumed that 
AV data is sent from an STB, and that the AV data is 
data claiming copyright protection. First, before per- 
forming authentication between the transmission 
decryption means 6 and the STB, a judgement is made 
as to whether the PC 24 is a legitimate device or not by 
using the CRL stored in the CRL memory of the STB. If 
it is judged to be a legitimate device, the transmission 
authentication means 2 performs authentication with 
the STB. If it is judged to be an illegitimate device, the 
STB does not perform authentication and the key for 



decrypting the encrypted AV data is not passed to the 
PC 24. 

[0063] Suppose here that the PC 24 is judged to be 
a legitimate device by the STB. Then, the transmission 

5 authentication means 2 performs authentication with 
the STB via the 1 394 D-IF 1 . When the authentication is 
completed successfully, the STB passes the key for 
decrypting the AV data to the transmission authentica- 
tion means 2 via the 1394 D-IF 1 . 

io [0064] Next, the signature creating means 9 cre- 
ates a digital signature for the currently running applica- 
tion software, and the digital signature is stored in the 
signature memory 4. The CRL comparing means 16 
judges whether the currently running application soft- 

15 ware is illegitimate software or legitimate software by 
comparing the contents of the digital signature stored in 
the signature memory 4 with the contents of the applica- 
tion CRL memory 15. If it is illegitimate software, 
authentication between the application software section 

20 13 and the system section 1 2 is not performed. On the 
other hand, if it is legitimate software, authentication 
between the application software section 13 and the 
system section 1 2 is performed next, it is assumed here 
that a Ncense similar to that described in the first 

25 embodiment is appended to the application software. 
[0065] The application CRL memory 15 is a mem- 
ory for the OS or driver residing in the PC 24; a sepa- 
rately created CRL may be prestored, or the CRL 
transferred from the IEEE 1394 may be used. Generally, 

30 the CRL is not fixed, but can be updated according to 
the situation. For example, if a device or application 
altered to infringe copyright is distributed, the CRL can 
be updated so as to cause authentication to fail by iden- 
tifying such a device or application. 

35 [0066] When the authentication is completed suc- 
cessfully between the application software section 13 
and the system section 1 2, the transmission decryption 
means 6 receives the decryption key from the transmis- 
sion authentication means 2, and decrypts the AV data 

40 received via the 1394 D-IF. Next, the intra-PC encryp- 
tion means 7 re-encrypts the AV data. Within the PC 24, 
the copyright claimed AV data is transferred in 
encrypted form until it is presented for use by the appli- 
cation software. The decryption means 1 1 in the data 

45 using (decoding and displaying) means 1 0 receives the 
decryption key from the application authentication 
means 8 and decrypts the AV data. The decrypted AV 
data is passed from the data using (decoding and dis- 
playing) means 10 to the currently running application 

so software for processing. 

[0067] On the other hand, when the authentication 
between the application software section 13 and the 
system section 12 failed, the AV data is once decrypted 
by the transmission decryption means 6 and then 

55 encrypted again by the intra-PC encryption means 7, 
and the encrypted data is transferred to the data using 
(decoding and displaying) means 10. Since the authen- 
tication failed, the application authentication means 8 
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cannot pars the decryption key to the decryption means 
? 1 which is therefore unable to decrypt the AV data. In 
this way, if the application software does not have an 
appropriate license, it cannot decrypt the AV data for 
processing, since the authentication fails. 5 
[0068] Or, information on the version of a defeated 
and invalidated tamper resistant system is retrieved 
from the application CRL memory 15, and if the version 
of the application is that of the invalided tamper resist- 
ant system, then the key for decrypting the AV data is 10 
not passed to the application authentication function 3, 
nor is the authentication between the system section 12 
and the application software section 13 performed. 
[0069] In this way, by judging whether the currently 
running application software is illegitimate or legitimate 15 
by using the CRL before performing authentication 
between the application software section and the sys- 
tem section, the application software can be rejected in 
advance if it has the potential of performing illegal oper- 
ations on the copyright claimed AV data. 20 
[0070] The re-encryption according to the present 
invention may be performed using the same key as that 
used to encrypt the data for transmission or a different 
key from that used to encrypt the data for transmission. 
Further, the AV data received In encrypted form may be 25 
transferred within the PC in the encrypted form without 
once decrypting it. It will also be noted that the method 
of re-encryption is not limited to the particular method 
described above, but any other specific method may be 
used. 30 
[0071] Furthermore, in the present embodiment, 
the intra- PC encryption means has been described as 
transmitting the encrypted data to the data using 
(decoding and displaying) means when the authentica- 
tion between the system section and the application 35 
software section failed, but instead, invalid data such as 
a blueback screen may be transmitted to the data using 
(decoding and displaying) means when the authentica- 
tion failed. By so doing, the copyright of the AV data can 
be protected more securely. 40 
[0072] The system section according to the present 
invention can be implemented using hardware constitut- 
ing the 1 394 D-IF or system software such as a driver or 
OS. That is, it may be implemented using hardware 
within the PC or using system software. 45 
[0073] The present embodiment has been 
described by taking an STB as an example of the exter- 
nal device from which the PC receives copyright 
claimed AV data, but the invention is not limited to this 
particular example; that is, any other device, such as a so 
DVC, DVHS, HDD. DVD-RAM, or broadcasting receiver 
may be used as the external device as long as it can 
transmit copyright claimed AV data. 
[0074] Further, the present embodiment has been 
described by taking IEEE 1394 as an example, but the 55 
invention is not limited to this particular example, and 
any other network may be used as long as it has the 
function of transmitting copyright claimed AV data 



together with its copyright information. 
[0075] It will also be noted that the AV data accord- 
ing to the present embodiment is not limited to 
video/audio data as described above, but should be 
interpreted to also include data such as copyright 
claimed programs or documents or any other data 
claiming copyright 

[0076] The PC described in the present embodi- 
ment is an example of the computer of the present 
invention. 

(Embodiment 3) 

[0077] Next, a third embodiment will be described 
with reference to Figure 3. 

[0078] The description of this embodiment deals 
with the case in which using a tamper authentication 
function, a judgement is made as to whether application 
software is illegally altered or not. 
[0079] The difference from the first embodiment is 
that the system section 12 includes the tamper authen- 
tication function 1 7 and the application software section 
13 includes a soft check means 18. 
[0080] The tamper authentication function 17 is a 
means for verifying a tamper code generated from appli- 
cation software to determine whether or not the applica- 
tion software has been tampered with. The soft check 
means 18 is a means for checking the currently running 
application and generating the tamper code. 
[0081] Next, the operation of the present embodi- 
ment having the above configuration will be described. 
[0082] Tamper resistant software that generates a 
tamper code, as described above, refers to software 
having resistance to internal analysis or alterations. 
That is, it refers to software that can protect against an 
offence from an ill-willed user attempting to illegally use 
copyright claimed AV data. Tamper resistant software 
generates a code called a tamper code. The soft check 
means 1 8 examines the program to verify the presence 
or absence of tampering, and also examines the execu- 
tion environment to verify the presence or absence of 
interception along the data path, the presence of a third 
party monitoring the execution of the program, etc. The 
tamper code is data representing the result of this veri- 
fication or an intermediate result By verifying this 
tamper code, it can be determined whether or not the 
tamper resistant software has been tampered with. That 
is, in the present embodiment, the application software 
is equipped with a built-in tamper resistant system. 
[0083] Here, as in the first embodiment, suppose 
that authentication is performed between the STB and 
the transmission authentication means 2, and that the 
authentication is completed successfully. Then, the soft 
check means 18 checks the currently running applica- 
tion software and generates a tamper code. The gener- 
ated tamper code is passed to the application 
authentication means where the tamper code is written 
into the digital signature by the signature creating 
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means 9; then, this digital signature is stored in the sig- 
nature memory 4. By referencing the digital signature 
stored in the signature memory 4, the tamper authenti- 
cation function 17 retrieves the tamper code of the cur- 
rently running application software and verifies it. The 5 
result of the verification as to whether the currently run- 
ning application software is illegally altered or not, or 
whether data interception or the monitoring of the pro- 
gram execution is being performed or not, is reported to 
the application authentication function 3. For simplicity, 10 
the following description is given by assuming that the 
verification as to whether data interception or the moni- 
toring of the program execution is being performed or 
not is included in the verification as to whether the appli- 
cation is illegally altered or not If the application soft- 15 
ware is illegally altered, the application authentication 
function 3 does not pass the key for decrypting the AV 
data to the application authentication means 8, nor does 
it perform authentication between the system section 12 
and the application software section 13. If the appfica- 20 
tion software is not altered illegally, the application 
authentication function 3 and the application authentica- 
tion means 8 perform authentication based on the dig- 
ital signature recorded in the signature memory 4. Here, 
as in the first embodiment, a license is appended to the 2 5 
application software. When the authentication is com- 
pleted successfully, the application authentication func- 
tion 3 passes the key for decrypting the AV data to the 
application authentication means 8. 

[0084] When the authentication is completed sue- 30 
cessfully between the application software section 13 
and the system section 12, the transmission decryption 
means 6 receives the decryption key from the transmis- 
sion authentication means 2, and decrypts the AV data 
received via the 1 394 D-IF 1 . Next, the intra-PC encryp- 35 
tion means 7 re-encrypts the AV data. Within the PC 24, 
the copyright claimed AV data is transferred in 
encrypted form until it is presented for use by the appli- 
cation software. The decryption means 11 constituting 
the data using (decoding and displaying) means 10 40 
receives the decryption key from the application authen- 
tication means 8 and decrypts the AV data. The 
decrypted AV data is passed from the data using 
(decoding and displaying) means 10 to the currently 
running application software for processing. 45 
[0085] On the other hand, when the authentication 
between the application software section 13 and the 
system section 12 failed, the AV data is once decrypted 
by the transmission decryption means 6 and then 
encrypted again by the intra-PC encryption means 7, so 
and the encrypted data is transferred to the data using 
(decoding and displaying) means 10. Since the authen- 
tication failed, the application authentication means 8 
cannot pass the decryption key to the decryption means 
1 1 which is therefore unable to decrypt the AV data. In 55 
this way, if the application software does not have an 
appropriate license, it cannot process the AV data, 
since the authentication fails. 



[0086] In this way, by incorporating a tamper resist- 
ant system into the application software and by adding 
a function for checking the application software for ille- 
gally tampering, the copyright of the AV data can be pro- 
tected more securely. 

[0087] The re-encryption according to the present 
invention may be performed using the same key as that 
used to encrypt the data for transmission or a different 
key from that used to encrypt the data for transmission. 
Further, the AV data transferred in encrypted form may 
be transferred within the PC in the encrypted form with- 
out once decrypting it It will also be noted that the 
method of re-encryption is not limited to the particular 
method described above, but any other specific method 
may be used. 

[0088] Furthermore, in the present embodiment, 
the intra-PC encryption means has been described as 
transmitting the encrypted data to the data using 
(decoding and displaying) means when the authentica- 
tion between the system section and the application 
software section failed, but Instead, the intra-PC encrip- 
tion means which transmits invalid data such as a blue- 
back screen to the data using (decoding and displaying) 
means when the authentication failed, may be used. By 
so doing, the copyright of the AV data can be protected 
more securely. 

[0089] The system section according to the present 
invention can be implemented using hardware constitut- 
ing the 1394 D-IF or system software such as a driver or 
OS. That is, it may be implemented using hardware 
within the PC or using system software. 
[0090] The present embodiment has been 
described by taking an STB as an example of the exter- 
nal device from which the PC receives copyright 
claimed AV data, but the invention is not limited to this 
particular example; that is, any other device, such as a 
DVC, DVHS, HDD, DVD-RAM, or broadcasting receiver 
may be used as the external device as long as it can 
transmit copyright claimed AV data. 
[0091] Further, the present embodiment has been 
described by taking IEEE 1394 as an example, but the 
invention is not limited to this particular example, and 
any other network may be used as long as it has the 
function of transmitting copyright claimed AV data 
together with its copyright information. 
[0092] It will also be noted that the AV data accord- 
ing to the present embodiment is not limited to 
video/audio data as described above, but should be 
interpreted to also include data such as copyright 
claimed programs or documents or any other data 
claiming copyright. 

[0093] Furthermore, the tamper code and the 
tamper resistance verification function according to the 
present invention are not restricted to using the particu- 
lar tamper resistant system, but can be implemented 
using any desired tamper resistant system. 
[0094] The PC described in the present embodi- 
ment is an example of the computer of the present 
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invention,, and the tamper authentication function 
according to the present embodiment is an example of 
the tamper resistance verification function of the 
present invention. 

5 

(Embodiment 4) 

[0095] Next, a fourth embodiment will be described 
with reference to Figure 4. 

[0096] The description of this embodiment deals 10 
with the case in which using a tamper authentication 
function, a judgement is made as to whether application 
software is illegally altered or not. 
[0097] The difference from the third embodiment is 
that the system section 1 2 includes a plurality of tamper 15 
authentication functions 21 and a version selecting 
means 20, and the soft check means 19 in the applica- 
tion software section 13 generates not only a tamper 
code but also type information indicating the type of the 
tamper resistant system built into the application soft- 20 
ware. 

[0098] The version selecting means 20 is a means 
for selecting the tamper authentication function corre- 
sponding to the type of the tamper resistant system, 
based on the digital signature recorded in the signature 25 
memory 4. 

[0099] Next, the operation of the present embodi- 
ment having the above configuration will be described. 
[0100] It is assumed here that, as in the third 
embodiment, the application software is equipped with 30 
a built-in tamper resistant system. Suppose, as in the 
third embodiment, that authentication is performed 
between the STB and the transmission authentication 
means 2, and that the authentication is completed suc- 
cessfully. Then, the soft check means 19 checks the 35 
currently running application software and generates a 
tamper code and type information indicating the type of 
the built-in tamper resistant system. The thus generated 
tamper code and type information are passed to the 
application authentication means 8 where the tamper 40 
code and type information are written into the digital sig- 
nature by the signature creating means 9; then, this dig- 
ital signature is stored in the signature memory 4. The 
version selecting means 20 selects the tamper authen- 
tication function to be used, by referencing the tamper 45 
resistant system type information stored in the signature 
memory 4. Here, it is assumed that the version selecting 
means 20 includes its own CRL memory for tamper ver- 
sions, though not shown here, and by utilizing this CRL 
memory, the version selecting means 20 operates so as so 
not to select tamper resistance check means 19 for 
which the method of defeating it is already known. The 
selected tamper authentication function 21 , by referenc- 
ing the digital signature stored in the signature memory 
4, retrieves the tamper code of the currently running 55 
application software and verifies it. The result of the ver- 
ification as to whether the currently running application 
software is illegally altered or not is reported to the 



application authentication function 3. If the application 
software is illegally altered, the application authentica- 
tion function 3 does not pass the key for decrypting the 
AV data to the application authentication means 8, nor 
does it perform authentication between the system sec- 
tion 12 and the application software section 13. If the 
application software is not altered illegally, the applica- 
tion authentication function 3 and the application 
authentication means 8 perform authentication based 
on the digital signature recorded in the signature mem- 
ory 4. Here, as in the first embodiment, a license is 
appended to the application software. When the 
authentication is completed successfully; the applica- 
tion authentication function 3 passes the key for 
decrypting the AV data to the application authentication 
means 8. 

[0101] When the authentication is completed suc- 
cessfully between the application software section 13 
and the system section 12, the transmission decryption 
means 6 receives the decryption key from the transmis- 
sion authentication means 2, and decrypts the AV data 
received via the 1394 D-IF 1 . Next, the intra-PC encryp- 
tion means 7 re-encrypts the AV data. Within the PC 24, 
the copyright claimed AV data is transferred in 
encrypted form until it is presented for use by the appli- 
cation software. The decryption means 1 1 in the data 
using (decoding and displaying) means 10 receives the 
decryption key from the application authentication 
means 8 and decrypts the AV data. The decrypted AV 
data is passed from the data using (decoding and dis- 
playing) means 10 to the currently running application 
software for processing. 

[0102] On the other hand, when the authentication 
between the application software section 13 and the 
system section 12 failed, the AV data is once decrypted 
by the transmission decryption means 6 and then 
encrypted again by the intra-PC encryption means 7, 
and the encrypted data is transferred to the data using 
(decoding and displaying) means 1 0. Since the authen- 
tication failed, the application authentication means 8 
cannot pass the decryption key to the decryption means 
1 1 which is therefore unable to decrypt the AV data. In 
this way, if the application software does not have an 
appropriate license, it cannot decrypt the AV data for 
processing, since the authentication fails. 
[0103] In this way, by not only incorporating a 
tamper resistant system into the application software 
but also providing a plurality of tamper resistant authen- 
tication functions in the system section, if the tamper 
resistant system of the application software is defeated, 
the system section need only switch to another kind of 
tamper resistant authentication function, eliminating the 
need for updating the version of the OS, etc., and the 
damage can thus be minimized if the tamper resistant 
system is defeated. 

[0104] The re-encryption according to the present 
invention may be performed using the same key as that 
used to encrypt the data for transmission or a different 
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key frc/n that used to encrypt the data for transmission. 
Further, the AV data received in encrypted form may be 
transferred within the PC in the encrypted form without 
once decrypting it it will also be noted that the method 
of re-encryption is not limited to the particular method 5 
described above, but any other specific method may be 
used. 

[0105] Furthermore, in the present embodiment, 
the intra- PC encryption means has been described as 
transmitting the encrypted data to the data using w 
(decoding and displaying) means when the authentica- 
tion between the system section and the application 
software section failed, but instead, invalid data such as 
a blueback screen may be transmitted to the data using 
(decoding and displaying) means when the authentica- 75 
tion failed. By so doing, the copyright of the AV data can 
be protected more securely. 

[0106] The system section according to the present 
invention can be implemented using hardware constitut- 
ing the 1 394 D-l F or system software such as a driver or 20 
OS. That is, it may be implemented using hardware 
within the PC or using system software. 
[0107] The present embodiment has been 
described by taking an STB as an example of the exter- 
nal device from which the PC receives copyright 25 
claimed AV data, but the invention is not limited to this 
particular example; that is, any other device, such as a 
DVC, DVHS, HDD, or DVD-RAM, may be used as the 
external device as long as it can transmit copyright 
claimed AV data. 30 
[0108] Further, the present embodiment has been 
described by taking IEEE 1394 as an example, but the 
invention is not limited to this particular example, and 
any other network may be used as long as it has the 
function of transmitting copyright claimed AV data 35 
together with its copyright information. 
[0109] It will also be noted that the AV data accord- 
ing to the present embodiment is not limited to 
video/audio data as described above, but should be 
interpreted to also include data such as copyright 40 
claimed programs or documents or any other data 
claiming copyright. 

[0110] Furthermore, the tamper code and the 
tamper resistance verification function according to the 
present invention are not restricted to using the particu- 45 
lar tamper resistant system described above, but can be 
implemented using any desired tamper resistant sys- 
tem. 

[0111] The PC described in the present embodi- 
ment is an example of the computer of the present so 
invention, and the tamper authentication function 
according to the present embodiment is an example of 
the tamper resistance verification function of the 
present invention. 

55 

(Embodiments) 

[0112] Next, a fifth embodiment will be described 



with reference to Figure 5. 

[0113] The description of this embodiment deals 
with the case in which information concerning the appli- 
cation software used to process AV data is embedded in 
the AV data by means of electronic watermarking. 
[01 14] The electronic watermarking here refers to a 
technique for inserting a signature or like data into AV 
data in a difficult-to-alter manner, regardless of whether 
the technique is based on analog data superimposition 
or on digital cryptography. 

[0115] The difference from the first and second 
embodiments is that the system section includes a sig- 
nature embedding means 22 and an electronic water- 
mark embedding means 23. 

[0116] The signature embedding means 22 refers 
to the contents of the digital signature recorded in the 
signature memory 4, and performs processing, such as 
selecting information necessary for the electronic water- 
mark embedding means 23 and preparing necessary 
format, preparatory to processing in the electronic 
watermark embedding means 23. The electronic water- 
mark embedding means 23 embeds data by electronic 
watermarking in the format prepared by the signature 
embedding means 22. 

[0117] In the present embodiment, the transmission 
authentication means 2, the application authentication 
function 3, the signature memory 4, the application 
authentication means 8, the signature creating means 
9, the transmission decryption means 6, the intra-PC 
encryption means 7, the data using (decoding and dis- 
playing) means 10, and the decryption means 11 are 
the same as the corresponding elements in the first 
embodiment. The CRL memory 14, the application CRL 
memory 15, and the CRL comparing means 16 are the 
same as the corresponding elements in the second 
embodiment. 

[0118] Next, the operation of the present embodi- 
ment having the above configuration will be described. 
[0119] Suppose that authentication is performed 
between an external device, for example, an STB, and 
the transmission authentication means 2 and is com- 
pleted successfully. Also suppose that authentication 
between the application authentication means 8 and the 
application authentication function 3 is completed suc- 
cessfully. Then, the encrypted AV data input via the 
1394 D-IF 1 is decrypted by the transmission decryption 
means 6. The signature embedding means 22 retrieves 
the digital signature containing application software 
information from the signature memory 4, and selects 
the contents. The selected contents include the name of 
the application software, the version number of the 
application software, information concerning the user, 
and information concerning the AV data itself. The sig- 
nature embedding means 22 applies preparatory 
processing, such as preparing the format, to these 
pieces of information and sends the processed informa- 
tion to the electronic watermark embedding means 23. 
The electronic watermark embedding means 23 pro- 
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duces an electronic watermark by incorporating these 
pieces of information into the decrypted AV data. The 
AV data with the thus produced electronic watermark 
incorporated therein is encrypted once again by the 
intra-PC encryption means 7, and the encrypted AV 5 
data is passed to the data using (decoding and display* 
ing) means 10. The decryption means 11 decrypts the 
AV data, and the data using (decoding and displaying) 
means 10 passes it to the currently running application 
software. The application software that received the AV 10 
data performs processing such as display, recording, 
playback, etc. 

[0120] Suppose here that the application software 
illegally recorded the electronically watermarked AV 
data and distributed it outside the PC 24. Also suppose 15 
that the CGMS or EMI contained in the illegally distrib- 
uted AV data was altered by an illegitimate application. 
The AV data thus altered is now recordable even on a 
legitimate device, and Is distributed to many devices. If 
a supervising organization checking illegal distribution 20 
of AV data obtains the AV data, the organization can 
retrieve the following information by referencing the 
electronic watermark embedded in the AV data. That is, 
from the information concerning the AV data, it is found 
that the AV data is copy prohibited data, etc., and from 25 
the information concerning the application software, the 
source application software used to illegally copy and 
distribute the AV data can be identified. 
[0121] In this way, according to the present inven- 
tion, the source of the illegal distribution can be identi- 30 
fied; besides, since the computer of the present 
invention is equipped with means for updating the CRL, 
the application responsible for the illegal distribution can 
be excluded from the use of AV data by updating the 
CRL based on the information concerning the source, 35 
thus providing specific means for preventing illegal use 
thereafter. By using the electronic watermark in this 
way, the source of the illegal copy can be identified, and 
thus the illegal application software can be easily iso- 
lated. 40 
[0122] The electronic watermarking system is not 
limited to the one used in the present embodiment, but 
any other system may be used as long as it can cor- 
rectly embed the above-mentioned information into AV 
data and can correctly extract the information from the 45 
AV data before or after decoding in the prescribed for- 
mat. 

[0123] In this way, by embedding an electronic 
watermark into AV data, illegal application software can 
be easily isolated and rejected. so 

(Embodiment 6) 

[0124] Next, a sixth embodiment will be described 
with reference to Figure 6. 55 
[0125] The PC of the present embodiment com- 
bines ail the functions of the PCs described in the first to 
fifth embodiments. 



[0126] The transmission authentication means 2, 
the application authentication function 3, the signature 
memory 4, the application authentication means 8, the 
signature creating means 9, the transmission decryp- 
tion means 6, the intra-PC encryption means 7, the data 
using (decoding and displaying) means 10, and the 
decryption means 11 are the same as the correspond- 
ing elements described in the first embodiment. The 
CRL memory 14, the application CRL memory 15, and 
the CRL comparing means 16 are the same as the cor- 
responding elements described in the second embodi- 
ment. The version selecting means 20 and the tamper 
authentication means 21 are the same as the corre- 
sponding elements described in the fourth embodiment. 
The signature embedding means 22 and the electronic 
watermark embedding means 23 are the same as the 
corresponding elements described in the fifth embodi- 
ment. 

[0127] The above configuration incorporates all the 
functions described in the first to fifth embodiments, and 
is therefore equipped with means for checking software 
reliability based on a tamper resistant system, a reliable 
detection method for detecting illegal use based on 
electronic watermarking, and means for preventing 
recurrence of illegal use once it is detected; accordingly, 
illegal use of copyright claimed AV data can be pre- 
vented in a reliable manner and, by introducing the con- 
cept of version into the tamper resistant system, 
collateral damage resulting from illegal use can be min- 
imized. 

[0128] The invention may also be embodied in the 
form of a program recording medium having a program 
and/or data recorded thereon for enabling a computer to 
implement all or part of the functions of all or part of the 
invention described in any one of the above-described 
embodiments, wherein the program and/or data is com- 
puter readable and the program and/or data read by the 
computer is used to carry out the above functions in col- 
laboration with the computer. 

[0129] The term "data" here includes data struc- 
ture, data format, and data type. 
[0130] The term "medium" refers to a recording 
medium such as a ROM, a transmission medium such 
as the Internet, or a transmission medium such as light, 
electric waves, soundwaves, etc. 
[0131] The term "medium holding thereon" means, 
for example, a recording medium having a program 
and/or data recorded thereon, or a transmission 
medium or the like for transmitting the program and/or 
data. 

[0132] The term "computer processable" means 
that in the case of a recording medium such as a ROM, 
for example, the medium is readable by a computer, and 
in the case of a transmission medium, the program 
and/or data to be transmitted can be processed by a 
computer as the result of the transmission. 
[0133] Further, the term "collection of information" 
includes, for example, software such as a program 
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and/or. data. 

POTENTIAL FOR EXPLOITATION IN INDUSTRY 

[0134] As is apparent from the above description, 5 
the present invention can provide a computer and a pro- 
gram recording medium which ensure that application 
software protects copyright for copyright claimed data, 
and which can address illegal alterations of the applica- 
tion software, identify and reject illegal application soft- io 
ware, and prevent illegal distribution without involving 
extra cost. 

Claims 

75 

1 . A computer which comprises a system section and 
an application software section, and which takes in 
copyright claimed, encrypted data via a digital inter- 
face for processing therein, wherein 

20 

said system section judges that said applica- 
tion software section is legitimate application 
software for the protection of copyright, and 
if said application software is a legitimate one, 
said system section passes a key for said 25 
encrypted data to said application software 
section. 

2. A computer as set fourth in claim 1 , wherein said 
judgement in said system section is made by per- 30 
forming authentication between said system sec- 
tion and said application software section. 

3. A computer as set fourth in claim 1, wherein said 
judgement in said system section is made by using 35 
a CRL (Certification Revocation List) listing illegiti- 
mate or legitimate application software. 

4. A computer as set fourth in any one of claims 1 to 3, 
wherein said system section obtains said encrypted 40 
key as the result of authentication with an external 
device, decrypts said encrypted data, and re- 
encrypts said decrypted data by using said key or 
another key. 

45 

5. A computer as set fourth in any one of claims 1 to 4, 
wherein said system section includes a tamper ver- 
ification function, and a tamper code is embedded 
into said application software in said application 
software section, and wherein said system section so 
reads said tamper code from said application soft- 
ware section and, using said tamper verification 
function, verifies whether or not said application 
software has been tampered with, and if it is found 
that said application software has been tampered 55 
with, said system section reports the result of said 
verification. 



6. A computer which comprises a system section and 
an application software section, and which takes in 
copyright claimed, encrypted data via a digital inter- 
face for processing therein, wherein 

said system section includes a plurality of 
tamper verification functions, and a tamper 
code associated with a designated type of 
tamper verification function and type informa- 
tion indicating said type are embedded into 
said application software in said application 
software section, and wherein said system sec- 
tion reads said tamper code and its associated 
type information from said application software 
section and, using the tamper verification func- 
tion corresponding to said type, verifies 
whether or not said application software has 
been tampered with, and if it is found that said 
application software has been tampered with, 
said system section reports the result of said 
verification. 

7. A computer which comprises a system section and 
an application software section, and which takes in 
copyright claimed, encrypted data via a digital inter- 
face for processing therein, wherein 

said system section sends said data to said 
application section by embedding into said 
data information concerning application soft- 
ware residing in said application software sec- 
tion. 

8. A computer as set fourth in claim 7, wherein the 
information concerning said application software is 
information indicating the name of said application 
software, or the version number of said application 
software, or a tamper code, or the type of a tamper 
resistance verification function, or information con- 
cerning user. 

9. A medium holding thereon a program and/or data 
for enabling a computer to implement all or part of 
the functions of ail or part of the means of the inven- 
tion described in any one of the claims 1 to 8, 
wherein said medium is computer processable. 

1 0. A collection of information wherein said collection of 
information is a program and/or data for enabling a 
computer to implement all or part of the functions of 
ail or part of the means of the invention described in 
any one of the claims 1 to 8. 
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